set firewall group port-group TESTPORTGROUP port '22'
set firewall name TEST rule 20 action 'accept'
set firewall name TEST rule 20 protocol 'all'
set firewall name TEST rule 20 source group port-group 'TESTPORTGROUP'

vyos@vyos# load config.boot
Load complete. Use 'commit' to make changes effective.
[edit]
vyos@vyos# commit
[ firewall ]
Protocol must be tcp, udp, or tcp_udp when specifying a port or port-
group
[[firewall]] failed
Commit failed
[edit]
vyos@vyos#